Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownHCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip messageOpen the advisoryJul 8, 2026
- UnknownHCSEC-2026-17 - Terraform Enterprise vulnerable to arbitrary file readOpen the advisoryJul 6, 2026
- UnknownHCSEC-2026-16 - Vault Audit Device Plugin Directory Guard Bypass via Legacy Path OptionOpen the advisoryJul 1, 2026
- High8.8HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to code execution on the client host through a path traversal attack.Check if you run itEPSS 0.66%May 12, 2026
- Medium6.0HashiCorp Nomad and Nomad Enterprise prior to 2.0.1 are vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack.Check if you run itEPSS 0.17%May 12, 2026
- Medium6.0HashiCorp Nomad’s exec2 task driver prior to 0.1.2 is vulnerable to arbitrary file read and write on the client host as the Nomad process user through a symlink attack.Check if you run itEPSS 0.17%May 12, 2026
- Medium4.7The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file.Check if you run itEPSS 0.14%May 12, 2026
- High7.5Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes.Check if you run itEPSS 0.34%May 4, 2026
- High7.5HCSEC-2026-08 - Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsCheck if you run itEPSS 0.91%Apr 17, 2026
- UnknownHCSEC-2025-32 - Incomplete Fix For Previous Vault DoS IssueOpen the advisoryOct 23, 2025
- UnknownCVE-2025-25292 is listed by HCSEC-2025-05 - Terraform Enterprise’s Single Sign-On and Ruby SAML’s CVE-2025-25291 and CVE-2025-25292.Open the advisoryMar 13, 2025
- UnknownCVE-2025-25291 is listed by HCSEC-2025-05 - Terraform Enterprise’s Single Sign-On and Ruby SAML’s CVE-2025-25291 and CVE-2025-25292.Open the advisoryMar 13, 2025
- Unknownonelogin ruby-saml Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 10.68%Sep 24, 2024
- UnknownHCSEC-2024-06 - HashiCorp Response to XZ Utils Supply Chain Attack (CVE-2024-3094)Open the advisoryApr 2, 2024
- UnknownCVE-2023-39325 is listed by HCSEC-2023-32 - Vault, Consul, and Boundary Affected By HTTP/2 “Rapid Reset” Denial of Service Vulnerability (CVE-2023-44487).Open the advisoryNov 2, 2023
- High7.5HTTP/2 Rapid Reset Attack VulnerabilityPatch nowKEVEPSS 100.00%Oct 10, 2023
- UnknownHCSEC-2023-19 - Terraform Enterprise, Docker Engine, and Go’s CVE-2023-24540Open the advisoryJun 28, 2023
- UnknownHCSEC-2023-02 - Vault, Consul, Boundary, and Waypoint Affected By Denial of Service in Go’s net/http (CVE-2022-41717)Open the advisoryFeb 8, 2023
- UnknownCVE-2022-3786 is listed by HCSEC-2022-27 - HashiCorp Response to OpenSSL Security Announcement Regarding November 1 Release.Open the advisoryNov 1, 2022
- UnknownCVE-2022-3602 is listed by HCSEC-2022-27 - HashiCorp Response to OpenSSL Security Announcement Regarding November 1 Release.Open the advisoryNov 1, 2022
- UnknownHCSEC-2022-14 - Nomad Impacted by go-getter VulnerabilitiesOpen the advisoryMay 24, 2022
- UnknownCVE-2022-30323 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Open the advisoryMay 24, 2022
- UnknownCVE-2022-30322 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Open the advisoryMay 24, 2022
- UnknownCVE-2022-30321 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Open the advisoryMay 24, 2022
- UnknownCVE-2022-26945 is listed by HCSEC-2022-13 - Multiple Vulnerabilities In go-getter Library.Open the advisoryMay 24, 2022